Don't want to mix it into another PR, so opening another issue to track. Could lump Dependabot in while we're at it. https://github.com/TuringLang/DynamicPPL.jl/pull/676